What is a firewall?
A firewall is a system that is set up to control traffic flow between two networks. Firewalls are most commonly specially configured Unix systems, but firewalls have also been built out of many other systems, including systems designed specifically for use as firewalls. The most common commercial firewall today is CheckPoint FireWall-1, but competitors such as Cisco's PIX are quickly catching up on CheckPoint.
Many people disagree on the definition of a firewall, and in this discussion I will use the term loosely.
The Packet Filtering Firewall
One type of firewall is the packet filtering firewall. In a packet filtering firewall, the firewall examines five characteristics of a packet:
* Source IP address
* Source port
* Destination IP address
* Destination port
* IP protocol (TCP or UDP)
Based upon rules configured into the firewall, the packet will either be allowed through, rejected, or dropped. If the firewall rejects the packet, it sends a message back to the sender letting him know that the packet was rejected. If the packet was dropped, the firewall simply does not respond to the packet. The sender must wait for the communications to time out. Dropping packets instead of rejecting them greatly increases the time required to scan your network. Packet filtering firewalls operate on Layer 3 of the OSI model, the Network Layer. Routers are a very common form of packet filtering firewall.
An improved form of the packet filtering firewall is a packet filtering firewall with a stateful inspection engine. With this enhancement, the firewall "remembers" conversations between systems. It is then necessary to fully examine only the first packet of a conversation.
The Application-Proxy Firewall
Another type of firewall is the application-proxy firewall. In a proxying firewall, every packet is stopped at the firewall. The packet is then examined and compared to the rules configured into the firewall. If the packet passes the examinations, it is re-created and sent out. Because each packet is destroyed and re-created, there is a potential that an application-proxy firewall can prevent unknown attacks based upon weaknesses in the TCP/IP protocol suite that would not be prevented by a packet filtering firewall. The drawback is that a separate application-proxy must be written for each application type being proxied. You need an HTTP proxy for web traffic, an FTP proxy for file transfers, a Gopher proxy for Gopher traffic, etc... Application-proxy firewalls operate on Layer 7 of the OSI model, the Application Layer.
The Application-Gateway Firewall
Application-gateway firewalls also operate on Layer 7 of the OSI model. Application-gateway firewalls exist for only a few network applications. A typical application-gateway firewall is a system where you must telnet to one system in order telnet again to a system outside of the network.
The SOCKS Firewall
Another type of application-proxy firewall are SOCKS firewalls. Where normal application-proxy firewalls do not require modifications to network clients, SOCKS firewalls requires specially modified network clients. This means you have to modify every system on your internal network which needs to communicate with the external network. On a Windows or OS/2 system, this can be as easy as swapping a few DLL's.
Subscribe to:
Post Comments (Atom)
Blog Archive
-
▼
2006
(509)
-
▼
November
(509)
-
▼
Nov 18
(42)
- What is nadi astrology ?
- WHAT IS MY MOON SIGN (RAASI) ?
- What is sun sign ?
- What is vedic astrology ?
- What is Numerology?
- What is palmistry?
- What is zodiac sign ?
- WHAT IS A BIRTHCHART?
- What is horoscope ?
- What is astrology ?
- What is Article Marketing?
- What is Art .... ?
- What is Animal Abuse?
- What is alternative medicine?
- What is Affiliate Marketing?
- What is Aerobics Cardio ?
- What is Aerobic Exercise and Why should I do it?
- What is Advertising?
- What is AAA (Authentication, Authorization, and Ac...
- What is a packet sniffer?
- What is an Intrusion Detection System (IDS)?
- What is a DMZ?
- What is a packet sniffer?
- What is an Intrusion Detection System (IDS)?
- What is a firewall?
- What is the use of infrared in cell phone?
- What is Wipro Technologies ?
- What is Infosys ?
- What is IBM ?
- What is Microsoft ?
- What is Microsoft Excel ?
- What is Microsoft Word ?
- What is microsoft active directory ?
- what is microsoft access ?
- What is pentium microprocessor ?
- What is intel celron ?
- What is intelligence ?
- What is internal medicine ?
- What is intranet ?
- What is a Browser?
- What is the World Wide Web and what makes it work?
- What is the Internet?
-
▼
Nov 18
(42)
-
▼
November
(509)
Mr.Shashi kiran
- skiranks
- bangalore, India
No comments:
Post a Comment